CVE-2005-0316

Description

WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/19144

http://www.securityfocus.com/bid/12394

http://securitytracker.com/id?1013036

http://secunia.com/advisories/14058

http://marc.info/?l=bugtraq&m=110693045507245&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3